Commit 30b0b790d7513b6b5cbfc323a6854a29013a2841

Authored by Sergio Oliveira
1 parent ac7e5779

Allowing superusers to edit other profiles

src/accounts/templates/accounts/user_detail.html
... ... @@ -19,9 +19,9 @@
19 19 <em>{{ user_.username }}</em>
20 20 </h1>
21 21  
22   - {% ifequal request.user user_ %}
23   - <a class="btn btn-info" href="{% url 'user_profile_update' user_ %}"><span class="glyphicon glyphicon-pencil"></span>&nbsp;&nbsp;{% trans "update your profile"|title %}</a>
24   - {% endifequal %}
  22 + {% if request.user == user_ or request.user.is_superuser %}
  23 + <a class="btn btn-info" href="{% url 'user_profile_update' user_ %}"><span class="glyphicon glyphicon-pencil"></span>&nbsp;&nbsp;{% trans "edit profile"|title %}</a>
  24 + {% endif %}
25 25  
26 26 <div class="divider"></div>
27 27 {% if request.user.is_active %}
... ...
src/accounts/templates/accounts/user_update_form.html
... ... @@ -70,7 +70,7 @@ $(function() {
70 70  
71 71 <div class="col-lg-12">
72 72 <a href="https://gravatar.com" target="_blank">
73   - {% gravatar request.user.email 50 %}
  73 + {% gravatar user_.email 50 %}
74 74 {% trans "Change your avatar at Gravatar.com" %}
75 75 </a>
76 76 </div>
... ...
src/accounts/views.py
... ... @@ -33,7 +33,7 @@ class UserProfileUpdateView(UserProfileBaseMixin, UpdateView):
33 33  
34 34 def get_object(self, *args, **kwargs):
35 35 obj = super(UserProfileUpdateView, self).get_object(*args, **kwargs)
36   - if self.request.user != obj:
  36 + if self.request.user != obj and not self.request.user.is_superuser:
37 37 raise PermissionDenied
38 38  
39 39 return obj
... ...